Signal
Supply chain attack hijacks CPUID site to serve malware via CPU-Z and HWMonitor downloads
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-04-10 12:53 UTCUpdated 2026-04-10 13:12 UTC
rss
supply_chain_attackmalwareincident_responsesecurity_tooling
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (2 domains)domains are deduped. counts indicate coverage, not truth.2 top sources shown
limited source diversity in top sources
Overview
The CPUID website was compromised in a supply chain attack that lasted about six hours, during which attackers gained access to an API and altered download links for popular tools CPU-Z and HWMonitor.
Entities
CPUIDCPU-ZHWMonitor
Score total
1.02
Momentum 24h
2
Posts
2
Origins
2
Source types
1
Duplicate ratio
0%
Why now
- The breach lasted six hours, showing attackers can quickly exploit supply chain weaknesses.
- Users downloading CPU-Z and HWMonitor during the incident were at immediate risk.
- Awareness of this attack can prompt organizations to review their software supply chain security measures.
Why it matters
- Supply chain attacks on trusted software platforms can distribute malware to large user bases.
- Hijacking download links for popular tools increases the risk of credential theft and system compromise.
- This incident highlights the need for robust security controls around software distribution infrastructure.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- Attackers hijacked CPUID's backend API to replace legitimate download links with malicious executables for CPU-Z and HWMonitor.
How sources frame it
- BleepingComputer: neutral
- The Register Security: neutral
All evidence
All evidence
Supply chain attack at CPUID pushes malware with CPU-Z/HWMonitor
bleepingcomputer_all · bleepingcomputer.com · 2026-04-10 13:12 UTC
CPUID site hijacked to serve malware instead of HWMonitor downloads
The Register Security · go.theregister.com · 2026-04-10 12:53 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- bleepingcomputer_all (1)
- The Register Security (1)
Top origin domains (this list)
- bleepingcomputer.com (1)
- go.theregister.com (1)